Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/ZpGAbaG9iTc5mQjGkWx21egzJos.roa
File: ZpGAbaG9iTc5mQjGkWx21egzJos.roa (raw, json)
Hash identifier: hVROdEr8DhK5izAOiu4sPZbk59hiOCePPc1b1fzj7Mc=
Subject key identifier: 66:91:80:6D:A1:BD:89:37:39:99:08:C6:91:6C:76:D5:E8:33:26:8B
Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Certificate serial: 019427B60F8E223676EE35203E1367F16B01
Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/ZpGAbaG9iTc5mQjGkWx21egzJos.roa
Signing time: Thu 02 Jan 2025 15:50:30 +0000
ROA not before: Thu 02 Jan 2025 15:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204492
IP address blocks: 82.194.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:0f:8e:22:36:76:ee:35:20:3e:13:67:f1:6b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Validity
Not Before: Jan 2 15:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6691806da1bd8937399908c6916c76d5e833268b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:b3:b4:57:c0:40:ae:15:10:c8:93:61:2a:
40:13:9a:1a:88:79:e3:7f:d3:0b:e6:07:93:af:bd:
20:bd:d7:35:76:94:97:01:d0:3d:04:5e:19:70:d8:
4f:4b:bb:d6:4b:4a:cd:73:3a:0d:39:dd:a1:8f:e7:
e6:dc:08:b3:ba:12:99:ae:30:40:4c:9e:a4:ee:1a:
41:bd:a3:f4:cd:f9:e9:91:7e:54:63:a7:d1:c5:d4:
15:5c:74:c4:67:00:8d:41:3d:c9:84:1e:51:f2:fb:
62:71:c8:75:7b:75:59:9a:33:24:86:f9:1c:e5:a5:
97:c3:ef:c6:65:42:f4:cb:8f:f6:cd:f1:00:d1:b9:
a7:96:50:7b:c5:32:93:14:43:c5:51:2f:fd:13:18:
fd:30:16:21:02:fa:a9:d6:cc:9e:ea:29:16:a5:31:
a0:eb:86:61:a5:d8:d8:9e:63:8a:6c:46:d4:73:d5:
75:d3:55:98:70:16:8e:a2:68:69:65:92:3e:82:49:
31:65:a8:28:c2:99:95:70:e2:8c:6d:cf:d0:8a:db:
96:95:f7:9c:ca:8b:47:2d:05:6e:f7:3d:32:6b:c7:
1a:9b:0d:bb:57:ab:7c:b1:cb:d3:2d:1e:fe:5b:80:
84:64:c2:9f:5a:06:31:9f:d2:11:a5:13:98:4d:c2:
d5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:91:80:6D:A1:BD:89:37:39:99:08:C6:91:6C:76:D5:E8:33:26:8B
X509v3 Authority Key Identifier:
keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/ZpGAbaG9iTc5mQjGkWx21egzJos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.194.236.0/24
Signature Algorithm: sha256WithRSAEncryption
10:65:0b:6c:0b:93:34:40:f5:e5:d0:13:71:b0:98:70:5f:13:
65:c8:9f:91:4b:a9:4f:e9:4e:ba:19:3f:8a:14:d4:f5:cb:5c:
2e:2b:e7:83:31:a5:5c:78:d6:c1:5a:82:5b:82:df:b5:e9:c0:
31:d6:1f:e5:cd:a8:d0:c9:2d:76:60:6b:06:4e:26:db:f9:18:
d8:63:17:44:32:2e:ba:b7:54:0d:0d:f3:b1:8c:85:e8:57:83:
3f:f8:33:9b:31:b7:92:d8:9e:09:5a:ac:25:1d:3d:fb:05:40:
3b:32:a5:17:6b:45:0a:cf:75:72:83:55:7c:fc:f0:91:e7:ef:
93:5b:1d:5d:6d:13:7a:f7:ab:94:6f:40:e4:b1:da:81:2c:1c:
ae:08:53:b4:d1:eb:66:10:ec:ec:75:49:a0:07:fe:70:2a:23:
70:3d:f9:b1:29:04:b4:94:64:62:78:71:ad:62:06:1e:f2:39:
0f:43:bf:0d:23:53:cc:d5:fa:0b:f1:40:20:88:98:ef:48:8f:
24:69:e7:b0:fb:dd:f2:e3:2f:00:df:31:54:c2:05:75:bc:64:
4f:86:d8:5d:72:85:c6:d6:24:f9:03:98:1c:10:c1:77:8c:05:
c7:a3:b8:02:95:07:63:b6:23:95:65:b2:06:4b:dc:5d:4e:87:
a1:a2:50:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:18 2025 by rpki-client on console.sobornost.net